CVE-2026-119615

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3.

The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the process_reset() function being registered on admin_init with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress administrator literally named 'admin' exists (the default on modern installs), and an identity test that verifies the ATTACKER'S OWN password rather than an administrator's…

11. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-119615